CVE-2026-17010

Name of the Vulnerable Software and Affected Versions Saitama Addon Pack versions prior to 1.0.9

Description The plugin fails to sanitize and escape specific post metadata values before they are output. This allows users with contributor-level access or higher to perform stored Cross-Site Scripting (XSS), where malicious scripts are permanently stored on the server and executed in the browser of a higher-privileged user who views the affected content.

Recommendations Update Saitama Addon Pack to version 1.0.9 or later.